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Cloud  Storage 


SCALABLE  COMPUTING. 

ON  DEMAND. 

THAT'S  WINDOWS  AZURE. 

THAT'S  CLOUD  POWER. 


WINDOWS  AZURE  gives  you  the  ability  to  develop  and  run  applications  in 
the  cloud  with  virtually  unbounded  scalability.  That  means  near-infinite  capacity 
when  you  need  it  It's  the  kind  of  flexibility  that  can  change  the  way  you  run  your 
business.  With  Windows  Azure,  inspiration  comes  less  from  worst-case  planning 
and  more  from  your  imagination.  That's  Cloud  Power. 

Explore  new  capabilities  at: 

Microsoft.com/cloud/azure 
Text  COMPl  to  70700* 

Or  scan  our  tag. 

Get  the  free  mobile  app  from  httpy/gettag.mobi 


fj  Windows  Azure 


E 


J 


, —  —  jl 

‘S|RVER^M0M^S  b 
THAfpiQUIRE" 

■  IW  '4imiLE  M 

GPS  NAVIGATION. 


SOLVED. 


to  get  you  out.  Like  virtualize 
infrastructures,  they're  blazir 


's  familiar  territory.  And  we  have  the  innovative  technology 
)lutions  from  VMware.  As  an  industry  leader  in  cloud 
trails  to  efficiency.  Our  Virtualization  Team  can  guide  you 


vmware'  + 
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MERGERS  &  ACQUISITIONS 

How  to  Integrate  a  Business  in  90  Days 

IT  SOUNDS  IMPOSSIBLY  FAST.  But  "deep  freeze '  —  and  Avnet  wants  to  minimize 

$23  billion  electronic  components  dis-  the  amount  of  lime  the  two  companies  are 

tributor  Avnet  can  usually  bring  acquired  operating  diHerently.  on  separate  IT  systems, 
companies  into  the  fold  —  including  IT  Besides,  faster  integration  nK'ans  a  quicker 

systems  —  within  go  days.  Da\t)ff  from  the  acquisition,  he  said. 


the  foiifth  quarter  ot  2010.  up  2i 
from  the  same  period  in  2009. 
according  to  infonelics  Research 
Research  firm  Dell'Oro  Group 
reported  that  for  the  fuH  year.  vt\ 
less  network  revenue  jumped  25 
surpassing  $5  billion. 

The  wireless  LAN  market  has 
changed  more  in  the  past  si't  moi 
than  It  tbdln  the  preceding  si^  ye 


MOBILE  «  WIRELESS 

iPad  Tf  iggers 
Spending  for 
Wi-Fi  Networks 

The  rising  popularity  of  tablets  and 
smartphones  has  boosted  sales  of 
Wi-Fi  equipment  to  new  highs  as 


How  to  Integrate  a  Business  in  90  Days 
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Burst 


7.9  billion 


;  request  a  Free  Business  Edit 


Experience  the  difference  for  your  busir 

www.eset.com/business_trial 


Our  business 
is  to  secure 
your  business. 


ESETNOD32  Antivirus  4 

Fast,  Effective,  Proactive,  Antivirus  and  Antispyware 


Our  award-winning  ESET  NOD32*  Antivirus  is  the  faster,  smarter,  easier-to-manage 
defense  against  Internet  threats.  With  a  unified  management  console  that  scales  to 
support  small  and  large  business  networks,  ESET  NOD32  delivers  advanced  proactive 
protection  for  all  your  endpoints  across  Windows,  Mac  and  Linux  platforms. 


The  difference  between 
networking  and  not  working. 

Some  systems  require  you  to  reconfigure  your  network  infrastructure 
to  match  their  standards.  Not  the  IBM  BladeCenter®  with  Intel®  Xeon® 
processors.  It  offers  a  broad  range  of  networking  technologies— including 
some  of  the  most  advanced  virtualization  solutions  in  the  industry.  So 
you  can  choose  the  one  that  works  best  with  your  infrastructure.  And 
IBM  BladeCenter  can  save  you  up  to  40%  on  networking  costs  versus 
competitive  offerings.' 


Take  10  minutes  to  see  for  yourself. 

Learn  how  you  could  achieve  a  3-month  ROI  on  your  migration 
with  our  Systems  Consolidation  Tool.  Visit  ibm.com/systems/blade 


Dave  Codack,  vice  president  of  em¬ 
ployee  technology  and  network  services 
at  TD  Bank  Financial  Group.  “The 
enterprise  is  not  dictating  technology 


NEWS  ANALYSIS 


iPad  2  Provokes 
Anxiety  in  IT 

IT  executives  worry  that  corporate  workers 
adopting  the  new  consumer  technology  will 
exp^  support  right  away.  By  Matt  Hamblen 


proved  graphics. 

“With  employees  using  these  devices  in 
their  day-to^y  lives,  it’s  inevitable  they 
will  expect  enterprise  sujqxrrt  to  eventu¬ 
ally  br^  these  two  wo^"  he  added. 

,  Analysts  say  that  companies  face 
huge  challenges  because  the  iPad  2  was 
not  made  with  IT  operations  in  mind. 

“Apple  did  not  address  this  at  all 
with  iPad  2,"  said  Jack  GcJd,  an  analyst 
at  J.Gold  Associates.  “I  think  they 
missed  an  opportunity.” 

Gartner  analyst  Ken  Dulaney  added  that  Apple  encourages 
businesses  to  adopt  iPads  but  “has  no  intention  of  becoming  a 
Dell,  an  HP  or  Lenovo  as  &r  as  enterprise  support.” 

Jude  Olinger,  CEO  of  The  Olinger  Group,  a  broad  user  of 
Brst'generation  iPads,  said  the  iPad  2  oSers  potential  work¬ 
place  beneBts  but  also  presents  IT  support  challenges. 

The  market  researcher  bought  284  first-generation  iPads  last 
April  to  conduct  shopper  surveys  at  134  U.S.  malls. 

Olinger  now  plans  to  buy  20  iPad  2  tablets,  partly  to  see 
whether  the  new  two-way  FaceTime  video  chat  capability  can 
enhance  the  process  of  conducting  surveys  remotely. 

Any  benefits  would  be  at  least  somewhat  oS^  by  Apple’s 
lack  (rf  iPad  support,  which  had  slowed  the  research  firm’s 
initial  iPad  deployment  pnxess,  Olinger  said. 

“The  hardest  thing  with  the  original  iPads  was  to  activate 
nearly  300  machines  at  one  time,”  he  said.  “[The]  four  people 
working  activations  could  only  get  40  done  a  day. 

“If  Apple  could  get  their  enterprise  [act]  together,  they  could 
^  Microsoft  a  run  for  their  money,”  Olinger  added.  “They  are 
nacking  into  the  enterprise.” 

Gold  suggested  that  RIM’s  BlackBerry  PlayBook  uMet  could  be 
1  good  fit  for  companies  concerned  about  Apple’s  level  of  support. 

“End  users  love  the  coiKept  of  iPad,”  Gold  concluded.  “But  IT  ul- 
amately  has  to  deploy  and  pay  for  ongoing  device  maintenance  and 
mntrol.  This  is  a  teal  cost  that  users  don’t  usually  appreciate.”  * 


If  Apple  could  get  their  enterprise  [act]  together,  they  could  give  Microsoft 
a  run  for  their  money. 


imation 


Best  of  Disk 


SMART.  SIMPLE.  SAFE. 
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MELCOR  code  analyzes 
severe  accidents  in 
nuclear  power  plants,  It  he] 

progression  through  core  melting 
should  inadequate  cooling  be  available, 
and  the  release  to  the  environment 
should  containment  systems  fail. 


4^' 


NRC  Aims  to  Meet 
Japan-like  Qiallenge 

Scientists  are  working  to  find  out  how  U.S. 
nuclear  plants  would  fare  during  a  disaster. 

By  Jaikumar  Vijayan  and  Patrick  Thibodeau 


Launched  late  last  year,  SOARCA  expands  on  earlier 
projects  by  using  the  latest  computing  resources  and 
complex  modeling  software  to  generate  more  accurate 
and  realistic  accident  simulations,  say  NRC  officials. 

The  SOARCA  project  uses  a  pair  of  modeling  tools 
developed  by  the  U.S.  Department  of  Eneigy’s  Sandia 
National  Laboratories:  MELCOR  (Methods  for  Esti¬ 
mation  of  Leakages  and  Consequences  of  Releases), 
which  models  the  “progression  of  severe  accidents  in 
light-water  reactor  nuclear  power  plants";  and  MACCSa 
(MELCOR  Accident  Consequence  Code  Systems  2),  for 
studying  the  potential  health  implications  of  an  acciden' 
involving  radiation  leaks,  said  Randall  Cauntt,  manager 
of  Sandia’s  severe  accident  and  consequence  assessment 
department. 

“MELCOR  code  analyzes  severe  accidents  in  nuclear 
power  plants,  [the]  progression  througji  core  melting 
should  inadequate  cooling  be  available,  and  the  release 
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FILE 

DATA 

EATING 

YOUR 


BUDGET? 


AutoVirt  IS  tne  leaamg  provicc  "  “ 
Use  AutoVirt  to  control  the  co  '  ' 

©  Assess  youf  file  storage 

©  Build  a  global  ijamespacc 

©  Create  and  implement  a  trc-  ' 

©  Consolidate  user  shares 

©  Migrate  data  without  dis'^ir* 

To  learn  more  t*-  '  '  - 
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W.  Craig 
Fugate 

The  FEMA  chief 
wants  to  use  mobile 
technology  to 
customize  alerts 
during  a  disaster. 

The  most  interestinf  thing  people 
don’t  know  ahout  you:  I  kayak. 
The  riskiest  thing  you  ever  dM: 

I  went  kayaking  during  a  tropical 
storm  in  Florida.  I  was  very  foolish. 
Your  favorite  vke; 

Coffee.  Large  quantities  of  it. 

My  staff  limits  my  intake  when  I  have 
to  do  public  speaking  or  they  can't 
get  me  to  shut  up. 

Your  favorite  technology: 

Digital  cameras. 

Your  personal  philosophy: 

Live  in  the  moment.  I  don't  worry 
about  the  past,  and  I  can't  do  much 
about  the  future.  All  I  can  do  is  what 


Before  becoming  administmtorfor  the  Federal  Emergency  Management  Agency 
in  May  2009.  Craig  Fugate  was  0  customer.  As  director  of  the  Florida  Division  of 
Emergency  Management,  he  oversaw  the  state's  response  to  many  hurricanes. 
Since  coming  to  FEMA,  he  has  responded  to  disosters  such  as  the  tsunomi  in 
American  Samoa  and  the  massive  floods  in  Tennessee  last  year.  Fiigate  spoke  recently  about 
the  need  for  emergency  data  feeds,  how  social  media  can  play  a  role  in  disaster  response,  and 
his  vision  o/a  future  that  includes  a  proactive,  location-based  warnir^  system  that  contacts 
cell  phone  users  in  harm’s  way  and  provides  detailed  instructions  on  what  to  do. 


In  what  ways  doas  FEMA  ust  IT  to  accompIMi  its  mission7  We  re  trying  to  change  the 
way  we’re  using  technology.  A  lot  of  the  things  we  were  doing  are  no  longer  relevant, 
particularly  when  we  look  at  things  like  CIS.  For  a  long  time,  the  attitude  here  was. 

Continued  on  page  16 
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1&rWEB  HOSTING 


PROPPCCIOMAI 

VA/PRCITFC 


1&1*  HOSTING  PACKAGES 


6  MONTHS 

FREE! 


OFFER  EXTENDED! 

1&1*  BUSINESS  PACKAGE: 


As  the  world's  largest  web  host,  we  know  the  developer 
features  you  need  in  a  hosting  package! 

Domains  Included 

■  info  .OrQ  All  hosting  packages  include  domains, 

0  -f  free  for  the  life  of  your  package, 

V  Unlimited  Traffic 

Unlimited  traffic  to  all  websites  in  your 
1&1  hosting  package. 

Developer  Features 

Extensive  language  support  with  PHP  5/6  (beta)  with 
Zend  Framework  and  git  version  management  software. 


o.* 


Online  Marketing  Tools 

SEO  tools  to  optimize  your  website. 

l&l  Webstatistics  makes  it  easy  to  monitor  your  progress. 


0 


Green  Data  Centers 

We're  committed  to  hosting  your  site  with 
a  minimal  impact  on  the  environment. 


■  3  Included  DonaiM 

■  Private  OoiMdn  ResMiatiM 

■  2S0GI«lleb  Space 

■  UNUMITEDiyafIk 

■  NEW:  Version  Manapenieat 
Software  (git) 

■  2,500  E-maH  Accounts 

■  SO  MySQL  Database  (too  m) 

■  2S  FTP  Accounts 

■  E-mail  Marketing  Tool 

M  24/7  Toll-free  Customer  Tnppert 


Get  started  today,  call  1-877-GO-1AND1 


www.1and1.corn 


THE  GRILL  |  W.  CRAIG  FUGATE 


fill  than  that.  That’s 
where  we  are  now, 
just  getting  p«^le  to 
understand  it. 

We  have  a  Web 
page,  but  what  good 
does  it  do  in  a  disaster 
if  people  don't  have 
Web  access?  But  they 

phone.  So  we  did  a 
mobile  Web  page 
last  year.  It’s  really  a 
simple  page.  If  you’re 
in  a  disaster  area,  you 
don’t  want  to  see  our 
org  chart  and  you 
don’t  care  about  our 

What  you  want  to  do 
is  find  the  informa¬ 
tion  pertinent  to  the 
event  and  how  to 
prepare  against  that 
threat.  So  we  did  a 
very  stripped-down, 
low-bandwidth  page 
information  about  the  big 


tkm?  We  don’t  have  answers,  but  we  can’^ 
answers.  Nobody  has  come  up  with  a  blueprint  that 
says  this  is  how  social  media  must  and  will  be  used 
in  all  disasters,  because  it  changes  fast.  We’re  trying 
to  figure  out  bow  to  get  into  conversations  with  the 
public  without  getting  into  one-on-one  transactions, 
which  would  be  next  to  impossible. 


still  cun  into  the  naysayers  who  say  you  can’t  trust  the 
public,  you  can’t  do  this,  you’ll  have  bad  outcomes. 

I’ve  always  looked  at  it  the  other  way:  It’s  going  to 
happen,  and  you  need  to  deal  with  it. 

Arc  you  plarniing  to  use  cell  phone  signals  to  locate 
victims  of  future  disasters  hi  the  U,S.?  Yes.  One  of 
the  lessons  learned  in  Haiti  was  that  a  lot  of  survivors 
were  mer^  trapped  in  the  nibble.  They  weren’t 


injured,  but  they  were  trapped  for  relatively  long 
periods  of  time  —  far  beyond  what  we  had  seen  in 
manyother  types  of  earthquakes.  But  if  you  have  cell 
signals,  you’ve  got  a  better  chance. 

How  can  FEMA  use  technology  to  bo  more  proactive? 

Two  things  are  happening.  One  is  the  evolution  of  the 
emergency  alert  system  under  the  Integrated  Public 
Alert  and  Warning  System.  It’s  in  the  implementation 
phase,  and  commercial  cell  phone  providers  will  have 
to  provide  emergency  alert  warnings  to  customers 

based  on  the  geographical  location  of  those  warnings. 

FEMA  and  the  FCC  have  been  working  for  some  time 

to  ptrnride  geocoded  warnings  that  cellular  carriers 
would  release  based  on  the  locations  of  their  cell 

towers.  This  has  been  in  process  well  before  social 

media  got  going  and  is  just  coming  to  fruition. 

The  next  piece  is,  if  you’re  in  a  hurricane  warning 
area  and  an  evacuation  onler  occurs,  wouldn’t  it 
make  sense  that  your  phone  could  tell  you  you’re  in  a 
warning  area,  and  this  is  where  you  need  to  go,  here’s 
tum-by-tum  directions  to  the  nearest  shelter,  all 
without  having  to  go  to  difierent  Web  pages? 

It’s  always  based  on  what  that  threat  means  to  you, 
and  the  directions  are  specific  to  what  your  needs 
are  —  not  something  so  generic  that  it  may  not  even 
apply  to  you.  With  broadcast  information,  people 
don’t  always  hear  which  one  they  need  to  do. 


worked  o«t?  They  said,  “Give  us  a  challenge,”  and  I 
said,  "[In  a  disaster],  wouldn’t  it  be  really  great  if  you 
had  one  app  where  I  could  just  hit  a  button  that  sends 
out  ‘I’m  OK,’  and  it  would  send  the  information  to  all 
of  my  lists,  whether  updating  my  Facebook  status  or 
Twitter  or  sending  a  text?  Just  one  button,  one  app, 
boom."  So  they  did  that. 


in  the  future,  bow  do  you  envision  feua  operating, 
and  what  role  will  technolofy  play?  I  want  to  tear 
down  the  walls  between  what  we’re  doing  with  out 
data  and  our  partners  and  the  public.  There’s  privacy 
issues  if  I'm  collecting  information  about  you  for  as¬ 
sistance.  I  need  to  keep  that  protected.  But  Td  like  all 
of  the  things  we’re  doing  in  trying  to  help  people  be 
much  more  transparent. 

The  other  part  is  to  make  sure  we  have  data  feeds 
in  a  standard  format  so  we’re  not  seeing  data  entered 
at  miikiple  points  repetitively.  We  get  information 
from  the  closest  place  where  it’s  shared,  so  we  don’t 
have  to  call  pet^le  to  ask,  "How  many  shelters  do  you 
have  open?"  As  I  update  my  shelter  information.  I’m 
publishing  it,  and  you  should  see  it  in  your  CIS  maps. 
Those  are  the  kinds  of  things  we  need.  FEMA  can’t 
do  all  of  it,  but  at  least  we  can  be  the  catalyst,  the  grit 
that  makes  the  pearl. 

-  Interview  hy  RobMt  L.  Hltdwll 


UNLOCK 

the  possibilities  of  change-ready 
computing  with  the  power 
of  convergence. 


HP  Converged  Infrastructure  unlocks  what's  next  with 
virtualization  on  HP  BlodeSystem. 

Server  virtualization  has  cut  costs,  but  you  can 
more  with  the  simplest  way  to  connect  to  networks  — 

HP  Virtual  Connect 

'vVith  HP  BlodeSystem  featuring  HP  ProLiant  G7  servers 
powered  by  AMD  Opteron'  6100  Series  processors, 

HP  Virtuol  Connect  lets  you  wire  once  so  you  can  make 


Unlock  the  possibilities  with  a  free  copy  of 
HP  Virfuol  Cor7noct  for  Dummies’ . 

»  hp.com/go/complexfty3 

HP  ProLiant  BL465c  G7  server 


$4,509  {Save  $777) 


You  may  want 
to  get  users  to 
standardize  on 
one  platform, 
but  they're 
determined 


own  way. 


Nkbols  has  been 
writing  about 
technology  and  the 
business  of  technology 
since  CP/M-80  was 
cutting-edge  and 
300bit/sec.wasafast 
Internet  connection - 
and  we  liked  it! 
He  can  be  reached  at 
sjvn@vnal.com. 


■VAUGHANNICHOLSl 


I  Want  My  iPad  at  Work! 


IOES  IT  SEEM  TO  YOU  that  everyone  and  his  brother  wants  to  bring 
his  own  gear  into  the  office  now?  You’ve  got  users  who  want  to 
bring  their  Apple  iPads  to  work,  and  others  who  want  to  use 
iPhones  or  Android  smartphones  instead  of  company-supplied 


BlackBerries.  And  someone  out  there  has  surely 
tried  to  bring  in  an  Xbox  Kinect  to  work  on  . . .  ub 
...  3D  motion  analysis?  Yeah!  That’s  the  ticket! 

OK,  so  maybe  no  one  has  managed  to  get  a 
Kinect  into  the  office,  but  people  ate  always 
trying  to  bring  their  tech  toys  to  work.  As  Patrick 
Thibodeau  tweeted  from  this  year’s  Computer- 
world  Premier  too  IT  Leaders  conference,  “CIOs 
who  don’t  support  employee-owned  devices, 
smartphones,  iPads,  etc.,  may  be  a  minority:  i.e. 


that’s  probably  doable,  but  it’s  not  perfect. 

The  problem  isn’t  just  the  IT  department’s, 
though.  Let’s  say  an  iPhone  user  gets  laid  off  and 
the  powers  that  be  want  all  corporate  e-mails  off 
of  his  phone  now.  How  do  you  deal  with  that? 
That’s  a  good  question,  and  1  don’t  have  a  great 
answer.  1  don’t  think  anyone  does  at  this  point. 

This  isn’t  the  first  time  we’ve  run  into  this  kind 
of  problem.  In  the  ’70s  and  ’80s,  the  first  PCs  that 
ai^ated  in  many  offices  belonged  to  employees.  IT 


This  isn’t  just  talk.  According  to  Nielsen,  Black- 
Berry  maker  RIM  is  in  a  dead  heat  with  Apple’s 
iOS  and  Google’s  Android  in  the  mobile  operating 
system  market,  but  it’s  losing  ground.  Forty-three 
percent  of  recent  smartphone  buyers  purchased 
an  Android  device,  while  26%  chose  an  iOS-based 
device  and  20%  opted  for  a  BlackBerry. 

Of  course,  some  employers  just  say  no  to  all 
personal  [^nes  and  tablets,  thou^  they  do  seem 
to  be  in  the  minority.  And  what  the  heck  is  a 
CIO,  CTO  or  anyone  in  IT  support  to  do?  Support 
multiple  platforms  with  the  same  budget?  ’That’s 
exactly  what  most  companies  seem  to  be  trying  to 
do.  But  there  are  no  serious  management  tools  that 
can  handle  iPads,  iPhones  and  Android  phones. 
Some  vendors  are  trying  to  offer  tools  that  do  that, 
but  no  one  has  emerged  as  a  market  leader. 

There  are  complications  beyond  that.  Google’s 
Android  Market  has  real  security  problems,  as  we 
have  painfully  discovered.  What’s  IT  suppos<xl  to 
do?  ’Bim  off  the  app  store  functionaUty?  How? 
Remove  user-installed  applications?  1  don’t  think 
so.  Insist  that  users  run  only  approved  applications? 
Good  hick  with  that!  Insist  that  they  all  install  an 
antivirus  program  of  the  company’s  choosing?  Well, 


ce  you  went  PC,  you  couldn’t  go  back. 

But  back  then,  IT  faced  an  influx  of  things 
running  CP/M  and  MS-DOS,  which  were  more 
or  less  compatible  with  one  another.  Today,  it’s 
several  different  platforms  —  phones,  tablets  and 
laptops  —  using  an  even  wider  variety  of  operat¬ 
ing  systems.  (Android  alone  had  four  different 
versions  at  last  count.) 

I  wish  I  had  an  easy  answer.  I  don’t.  You  may 
want  to  get  users  to  standardize  on  one  platform, 
but  they’re  determined  to  go  their  own  way  — 
apparently  with  corporate  data  in  their  pockets. 

There  wasn’t  a  sdution  back  in  the  d^,  either. 
Eventually,  for  better  or  for  worse,  IT  settled  on 
Microsoft  products  for  the  desktop,  and  then  for 
the  laptop.  I  don’t  see  that  happening  this  time. 
Microsoft’s  earlier  success  came  thanks  to  illegal 
pressure  on  PC  vendors.  In  this  go-round,  Micro¬ 
soft  is  barely  a  player  on  the  new  platforms,  Apple 
still  has  little  interest  in  the  business  market,  and 
everyone  else  is  doing  their  own  thing. 

It’s  going  to  be  a  tough  few  years  in  the  IT  busi¬ 
ness.  I’m  just  glad  that  althou^  I’ll  be  coveting  it, 
1  won’t  be  in  it.  Good  luck,  guys  and  gals.  You’re 
goingtoneedit. « 
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Data  Center  Systems,  (DCS)  designs,  manufactures  and  installs  fiber  optic  and 
copper  solutions  for  Enterprise  Class  Data  Centers.  Our  Technical  Account  team 
has  more  than  20  years  experience  working  with  Data  Center  Managers  in  the 
SAN  and  Mainframe  environment.  DCS  can  provide  you  with  a  creative  and 
custom  soiution  that: 


Is  based  on  your  specific  needs  and  your  data  center  environment 
Includes  detailed,  engineered  drawings 
Allows  for  future  growth  and  industry  trends 
Incorporates  today's  and  tomorrow's  data  center  best  practices 
Can  be  manufactured  and  installed  within  the  timeframe  you  require 


Contact  Us: 
Sales@datacentersys.com 
vwvw.datacentersys.com 
1881  Valley  View  Lane 
Dallas,  TX  75234 
972-620-4997 
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Companies  in  various 
vertical  industries 
are  taking  tentative 
steps  toward  the 
savings,  and  risks, 
of  the  cloud. 

BY  BETH  SCHULTZ 
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ing  Cirtas  Systems,  Nasuni,  Panzura  and 
StorSimple,  have  developed  gateway  storage 
products  designed  to  be  flexible  enough  to 
accommodate  enterprises'  varying  storage 


users  to  build  hybrid  clouds,  using  local 
'•aches  for  data  that  is  used  frequently,  must 
Continued  on  page  24 


Cloud  by  Van  Gogh,  1890 


Cloud  by  SunGard,  2011 


A  work  of  art  in  secure  computing. 


Building  a  better  cloud  takes  a  revolutionary  approach  to 
virtualization  that  goes  far  beyond  conventional  solutions. 
With  a  resilient  infrastructure  and  robust  security,  SunGard 
provides  maximum  protection  and  a  fully  managed  solution 
that  virtually  eliminates  the  risk  of  failure.  Navigate  the  cloud 
with  confidence  as  it  dynamically  scales  to  meet  your  needs. 
With  leading-edge  technology  and  a  staff  of  accomplished 
professionals,  SunGard  can  help  make  your  next  cloud 
computing  project  a  work  of  art. 


Download  the  white  paper 
"Building  a  Better  Cloud" 
at:  6ungardas.com/cloud1 1 


t  '  ^  SUNGARD  AVAILABILITY  SERVICES 
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NCRYPTION  should  help 
relieve  any  concerns  about 
security  and  compliance  that 
IT  professionals  might  have 


public  cloud  storage  use, 


SPOTLIGHT 


NCRYPTION  Should  help 
relieve  any  concerns  about 
security  and  compliance  that 
IT  professionals  might  have 
when  they're  contemplating 
public  cloud  storage  use. 
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“We  tried  a  highly  collaborative  portal,  where  we’d 

be  accessed  quickly,  requires  tight  security  or  is  other- 

have  contact  lists,  calendars,  tasks  and  all  that,  but 

wise  unsuited  for  the  cloud,  while  sending  the  rest  out 

nobody  used  it  —  and  we  still  needed  to  collaborate 

to  public  storage. 

on  file  storage,  or  file  manipulation,”  he  explains.  ‘We 

“If  a  SCTvice  provider  can  say,  ‘We  know  your 

needed  a  place  where  everybody  could  go,  and  this  is 

wodcflow.  We  know  how  you  deal  with  your  custom- 

so  simple.  People  see  a  file,  they  download  the  file,  they 

ers.  We  know  that  this  data  is  sensitive  and  that  data  is 

put  it  back  and  we  pick  it  up.” 

not,  and  we  propose  to  do  a  better  and  cheaper  job  of 

When  Clark  Nuber  was  deciding  on  a  file-sharing 

bolding  the  nonsensitive  data  for  you,'  then  it’s  much 

provider,  security  was  a  prime  consideration.  “We 

mote  viable  for  that  company  to  say,  ‘This  offering  will 

needed  a  provider  that  was  large  enough  —  certainly 

meet  ycmr  needs,’  ”  Reichman  adds. 

larger  than  us  —  with  volume  on  its  side  so  it  could 

Data  management  service  provider  Iron  Mountain,  for 

afford  a  much  more  secure  data  center  than  we  could,” 

esample,  has  added  an  onsite  storage  qition  to  supplement 

says  Henley.  “Security  was  an  easy  call,  actually.  Secu- 

its  CNgital  Record  Center  for  Medical  Images,  a  cloud 

city  is  going  to  be  much  better  at  a  place  like  Amazon 

stor^  service  for  medical  data.  The  combination  gives 

than  it  is  at  Clark  Nuber  —  we  don’t  have  armed 

healthcare  CMganizations  greater  flexibility  in  crafting 

guards  outside  our  server  room,  if  you  get  my  point." 

their  access  and  badcup  processes,  says  Inm  Mountain. 

Clark  Nuber  clients  who  want  data  security  assur- 

But  while  many  providers  claim  that  their  offerings 

ances  can  get  a  SAS  70  audit  report  from  Amazon,  as 

enable  compliance  with  specific  regulatory  mandates. 

well  as  statements  firom  ShareFile  and  Clark  Nuber 

there  ate  few  cloud  storage  services  that  ate  truly 

itself  on  their  roles  in  the  security  chain.  “They’re  all 

oriented  to  specific  vertical  industries,  according  to 

different.  ShareFile  and  Clark  Nuber  don’t  provide 

Reichman.  “It  would  be  hard  for  me  to  say  that  there  is 

physical  security  for  the  data;  Amazon  does  that.  Clark 

any  major  vertical  where  cote  applications  ate  moving 

Nuber  doesn’t  provide  any  management  of  how  the 

to  the  cloud  yet,”  he  says. 

data  gets  to  browsers;  ShareFile  does  that.  Neither 

Amazon  nor  ShareFile  assigns  users  or  has  access  to 

Cloud  Pays  Off  for  Accounting  Firm 

passwords;  Clark  Nuber  does  that,”  Henley  explains. 

“Like  everybody  else,  out  storage  needs  ate  very  diverse. 

Because  Clark  Nuber  doesn’t  audit  public  companies. 

and  there  ate  many  different  reasons  for  putting  daU 

it  doesn’t  have  to  take  into  account  US.  Securities  and 

in  the  cloud  or  not,”  says  Peter  Henley,  CIO  at  Qark 

Exchange  Commission  mandates.  But  it  does  anyway. 

Nuber,  a  Bellevue,  Wash.-based  accounting  firm. 

Henley  says.  For  example,  it  ensures  that  data  is  encrypt¬ 

For  example,  the  company  has  solved  version-control 

ed  while  in  transport  and  locked  down  while  at  rest,  and 

problems  sirce  it  started  using  the  cloud  to  store  data 

it  can  assess  audit  logs  should  a  breach  occur. 

that  Clark  Nuber  accountants  and  clients  closely 

Use  of  cloud-based  file-sharing  was  once  a  competi¬ 

collaborate  on,  he  says.  The  firm  keeps  its  data  in  Ama¬ 

tive  differentiator  among  accounting  firms,  but  that’s 

zon’s  S3  cloud  and  has  a  file-sharing  application  from 

not  necessarily  the  case  anymore.  “Everybody’s  getting 

ShareFtle  on  the  front  end.  That  setup  has  been  a  huge 

into  this  now,”  says  Henley. 

hit  with  users,  according  to  Henley. 

Continued  on  page  z6 
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move 
fearlessly 
among 
the  clouds. 

it’s  open.'yet  secure, 
agile,  yet  efficient, 
virtual,  yet  real. 

it  builds  on  your  current  network, 
combining  servers,  networking, 
storage  and  virtualization, 
so  you  can  deploy 
applications  in  minutes, 
not  weeks. 

move  among  the  clouds, 
grow  your  business, 
and  turn  silos  into 
new  ways  of  working  together. 

introducing  the  Cisco  data  center 
business  advantage. 

cisco.com/go/dcbusiness 

to^eJtkeJi  we  are  ,i|i.i|i. 

the  numan  network,  cisco. 
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Warming  Up 


Education  Group  Goes  Off-campus 

For  WliippIfUill  Comnuinicalkms.  which  pmvkk-s  a 
iKJsied  Web  a>innmnKatu>iis  piatlorin  lf>r  pnvaic  scl»x)l.s. 
ilie  need  for  a  better  backtijj  straleg)-  l«l  ti)  ihe  cktud.  says 
D(Hig  Snurt,  IT  nuruger  at  iIk*  Bedford.  N.H..  company. 

Today  WhippleHill  backs  up  critical  data  using  a 
public  cloud  backup  sen.  ice  from  Zetta.  The  comjxiny 
liad  been  backing  up  those  files  to  disk  and  storing  tlK*ni . 
in  a  different  building  on  the  cj>rpt>rate  campus.  Snurt 
says.  “We  decided  that  really  wasn't 
offsite  enough  for  data  like  our  source 
code,  ck>cumentat  ion  and  Wikis.  We 
In  needed  to  get  tliuse  out  of  here,  and 

V  Zetta  made  it  easy,"  he  adds,  f  !e  points 

wr  out  tlut  Zetia  helped  Whippk-Hill  write 

automated  backup  scripisand  that  it 
IQII0  offers  WitKkms  svik:  ca|)abilities  and 

H  support  for  a  wide  variety  of  file  system 

1  pn)toco]s  —  including  Secure  Shell 

FileSyslem.  which  WhippleHill  uses  ft»r 
Linux  server  backups. 


he  wouldn’t  change  his  mind  on  that 
before  thoroughly  investigating  Zetta’s 

^  can  meet^'mandates  such  as  iheThose  of  the  PCI 
Security  Standards  Council.  “Frankly,  I  haven’t  talked 
to  Zetta  about  encryption  on  its  end,  because  it  hasn't 
been  important  for  what  we’ve  got  out  there  now.”  says 
Smart,  noting  that  the  data  is  encrypted  acnjss  tlie 
wire  and  protected  by  passwords. 

Local  Government  Alleviates  Risk 

Brian  Moynihan.  IT  director  fnrClinton.'Mich..  a 
small  town  20  miles  northeast  of  Detroit,  faced  simibr 
data  storage  decisions. 

“Of  course,  we  do  the  industry-standard  backups, 
with  multiple  copies  on  RAID  drives  and  online  storage 
in  vaults.  But  ultimately  we  realized  the  township  in  and 
of  itself  is  a  centralized  location.  No  matter  Ikjw  nuny 
copies  of  data  I  have  in  buildings  amund  the  lowaship. 
in  the  face  of  a  natural  disaster,  we  still  have  a  single 
point  of  failure  in  terms  of  our  storcxl  data,”  he  says. 

A  year  and  a  half  ago,  Clinton’s  steering  committee 
began  exhaustive  disaissions  about  how  best  to  address 
that  problem.  It  eventually  decided  to  turn  to  public 
cloud  storage,  but  at  that  lime  the  most  readily  available 
options  were  consumer-oriented  offerings  from  Carbo- 
nite  and  Mozy.  Moynihan  says. 

"We  began  investigating  what  it  would  take  for  us  to 
do  honest-to-gcHKlness  cloud-based  offsite  storage  but 
didn't  initially  find  anything  that  pnwkli'd  a  real  gixxl 
fit  for  what  we  wanted  to  do,  whicfi  was  to  have  an  ar¬ 
chived,  easily  accessible  offsite  copy  of  our  data,"  he  .says. 


Iiy.  Mo>'nihan  says.  Although  the  township  liasn't  yet 
begun  using  the  Synaptic  service  (Moynihan  s,iys  ke) 
municipal  dec  ision-makers  move  at  a  gkicial  pace),  it 
intends  to  rely  on  it  for  daily  system  backups  and  opera¬ 
tional  lockups  of  financial  man.igement  a]>|)lications 
and  otlKT  systems  used  on  a  day-to-day  basis.  Later,  it 
will  use  Synaptic  for  long-term  aahiving  of  documents 
such  as  death  records  and  projXM  iy  deals  that  must  be 
accessible,  e*ssentially,  forever. 

With  the  daily  system  and  operational  backups. 
Mcynihan  says,  compliance  isn’t  an  issiR*.  But  llie  stevr- 
ing  committee  has  concerns  about  t  lie  archiving.  While 
tlw  Fa*edf)m  of  Information  Act  requires  that  much  of 
the  townships  historical  data  must  be  readily  accessible, 
"that  ikx*sii'i  mean  wv  want  to  publish  everything  (►penly 
on  the  Web."  he  says. 

Wlxm  clttK»sing  a  public  ckiud  storage  provider. 
Moynihan  says,  officials  had  to  consider  wlieiv  in 
the  wtjrld  the  data  might  be  kept.  "Foi  enKrtional  and 
political  reasons,  pet^le  lieie  don't  want  our  data  across 
borders,"  Ik?  explains. 

For  example,  he  had  to  rule  out  G«)ogle’s  cloud 
storage  offering,  because  the  company  couldn't 
guarantee  that  tl>c  townships  data  would  be  stored  on 
domestic  servers.  AT&T,  on  the  other  hand.  identifitHi 
the  .specific  data  center  that  would  hold  Clinton’s  data 
—  and  it  said  the  information  would  Ik*  Hn^rypled. 

Pharmaceutical  Firm  Trusts  the  Cloud 

At  AMAG  Pharmaceuticals,  storage  is  jwrt  and  (wrcel  of 
a  cloud  computing  strategy  aimed  at  reducing  IT  ct>sis 
and  optimizing  busines.s  capabilities.  The  Lexington, 

Infrastructure  and  S3  storage  servitx*s.  as  well  as  sf»fiware- 
as-a-service  opik)ns  when  possibk*.  .says  Nate  McBride,  ex¬ 
ecutive  director  of  IT.  "We're  tiKwingail  oftnir  storage  to 
that  environnK*nt.  in  two  buckets  —  for  fik*s  and  e-mail," 
he  says,  noting  that  the  company  uses  Egnyte's  Cloud  File 
Server  on  tlx*  fnmt  end  for  files  and  G(K>gIe  ami  PostinI 
.systems  for  storage  and  archiving  of  e-mail. 

McBride  di.smisses  comnK>n  a)iKern.s  about  cltnid 
snxage.  saying  he  trusts  tlx  venik)rs  to  prov  ide  belter 
data  security  than  his  small  organization,  and  lx  notes 
that  AMAG  Ls  in  compliame  with  all  relevant  federal 
and  state  mandates.  Including  the  Sarbanes-Oxley  Act. 
Simplistkally  speaking,  he  says,  it's  done  by  mH  linking 
AMAG  and  its  perscxmel  with  the  respective  data  types. 

For  public  cloud  storage  users  like  McBride  and  PBS’s 
Engclson,  the  question  seem.s  to  be.  “What's  the  fu.ss?" 

“Talking  about  S3  .seems  so  mundane;  It  really  has 
bectjme  something  that  1  don’t  worry  aljout."  Engelson 
says.  “It's  really  just  an  extension  of  what  we  do  —  we 
have  U»  store  tiur  data  somewhere,  and  S3  is  our  slan- 
dard  for  that.”  ♦ 

Schultz  i>  (I  lortgrirne  IT  writer  and  editor  itt  ( 'lik  ago.  Voo 
eon  reae/i  her  of  l)M  fii</t25ki4(a;goioil.<  otfi. 
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Education  Group  Goes  Off-campus 

For  WhippieHill  Communications,  which  provides  a 
hosted  Web  communications  platform  for  private  schools, 
the  need  for  a  better  backup  strata  led  to  the  cloud,  says 
Doug  Smart.  IT  manager  at  the  Bedford.  N.H..  company. 

Today  WhippieHill  backs  up  critical  data  using  a 
public  cloud  backup  service  from  Zetta.  The  company 
had  been  backing  up  those  files  to  disk  and  storing  them 
in  a  different  building  on  the  corporate  campus.  Smart 
says.  “We  decided  that  really  wasn't 
o&ite  enough  for  dau  like  our  source 
code,  documentation  and  Wikis.  We 
needed  to  get  those  out  of  here,  and 
Zetta  made  it  easy.”  he  adds.  He  points 
out  that  Zetta  helped  WhippieHill  write 
automated  backup  scripts  and  that  it 
offers  Windows  sync  capabilities  and 
support  for  a  wide  variety  of  file  system 
protocols  —  including  Secure  Shell 
FdeSystem.  which  WhippieHill  uses  for 
Linux  server  backups. 

Still.  Smart  says  he's  not  ready  to 
entrust  highly  sensitive  data,  such  as 
human  resources  information  or  credit 
card  numbers,  to  cloud  storage.  And 
he  wouldn't  change  his  mind  on  that 
before  thoroughly  investigating  Zetta's 
policies  and  procedures  for  ensuring  that  its  custom¬ 
ers  can  meet  mandates  such  as  the  those  of  the  PCI 
Security  Standards  Council.  “Frankly.  I  haven't  talked 
to  Zetta  about  encryption  on  its  end.  because  it  hasn't 
been  important  for  what  we've  got  out  there  now.”  says 
Smart,  noting  that  the  data  is  encrypted  across  the 
wire  and  protected  by  passwords. 

Local  Government  Alleviates  Risk 

Brian  Moynihan.  IT  director  for  Clinton.  Mich.,  a . 
small  town  20  miles  northeast  of  Detroit,  faced  similar 
data  storage  decisions. 

“Of  course,  we  do  the  mdustry-standaid  backups, 
with  multiple  copies  on  RAID  drives  and  online  storage 
<n  vaults.  But  ultimately  we  realized  the  township  in  and 
of  itself  is  a  centralized  location.  No  matter  how  many 
copies  of  data  I  have  in  buildings  around  the  township, 
in  the  face  of  a  natural  disaster,  we  still  have  a  single 
point  of  foilure  in  terms  of  our  stored  data.”  he  says. 

A  year  and  a  half  ago.  Qinton's  steering  committee 

that  problem.  It  eventually  decided  to  turn  to  public 
cloud  storage,  but  at  that  time  the  most  readily  available 
options  were  consumer-oriented  oferings  from  Carbo- 
nite  and  Mozy.  Moynihan  says. 

“We  began  investigatii^  what  it  would  take  for  us  to 
do  honest-to-goodness  cloud-based  offeite  storage  but 
didn’t  initially  find  anything  that  provided  a  real  good 
fit  for  what  we  wanted  to  do.  which  was  to  have  an  ar¬ 
chived.  easily  accessible  olfisite  copy  of  our  data.”  he  says. 


Then  officials  discoveted  AT&T  Synaptic  Storage  as 
a  Service,  a  pay-as-you-go  storage  option  that  was  par¬ 
ticularly  attractive  to  the  revenue-strapped  municipal¬ 
ity.  Moynihan  says.  Although  the  township  hasn’t  yet 
b^n  using  the  Synaptic  service  (Moynihan  says  key 
municipal  decision-makers  move  at  a  glacial  pace),  it 
intends  to  rely  on  it  for  daily  system  backups  and  opera¬ 
tional  backups  of  financial  management  applications 
and  other  systems  used  on  a  day-to-day  basis.  Later,  it 
will  use  Synaptic  for  long-term  archiving  of  documents 
such  as  death  reconls  and  property  deeds  that  must  be 
accessible,  essentially,  forever. 

With  the  daily  system  and  operational  backups. 
Moynihan  says,  compliance  isn’t  an  issue.  But  the  steer¬ 
ing  committee  has  concerns  about  the  archiving  While 
the  Freedom  of  Information  Act  requires  that  much  of 
the  township’s  historical  data  must  be  readily  accessible, 
“that  doesn’t  mean  we  want  to  publish  everything  openly 
on  the  Web,”  be  says. 

When  choosing  a  public  cloud  stoit^  provider, 
Moynihan  says,  officials  had  to  consider  where  in 
the  world  the  data  might  be  kept.  “For  emotional  and 
political  reasons,  people  here  don’t  want  our  data  across 
borders,"  he  explains. 

For  example,  he  had  to  rule  out  Google’s  cloud 
storage  offering,  because  the  company  couldn’t 
guarantee  that  the  township’s  data  would  be  stored  on 

domestic  servers.  AT&T,  on  the  other  hand,  identified 

the  specific  data  center  that  would  hold  Clinton’s  data 
—  and  it  said  the  information  would  be  encrypted. 

Pharmaceutical  Firm  Trusts  the  Cloud 

At  AMAG  Pharmaceuticals,  storage  is  part  and  parcel  of 
a  cloud  computing  strategy  aimed  at  reducing  IT  costs 
and  optimizing  business  capabilities.  The  Lexington. 
Mass.,  biopharmaceutical  company  uses  Amazon's  ECz 
infrastructure  and  S3  storage  services,  as  well  as  software- 
as-a-service  options  when  possible,  says  Nate  McBride,  ex¬ 
ecutive  director  of  IT.  “We’re  moving  all  of  our  storage  to 
that  environment,  in  two  buckets  —  for  files  and  e-mail,” 
he  says,  noting  that  the  compar^y  uses  Egnyte’s  Cloud  File 
Server  on  the  front  end  for  files  and  Google  and  FOstini 
systems  for  storage  and  archiving  of  e-mail. 

McBride  dismisses  common  concerns  about  cloud 
storage,  saying  be  trusts  the  vendors  to  provide  better 
data  security  than  his  small  organization,  and  be  notes 
that  AMAG  is  in  compliance  with  all  relevant  federal 
and  state  mandates,  including  the  Satbanes-Oxley  Act. 
Simplistically  speaking  he  says,  it’s  done  by  not  linking 
AMAG  and  its  personiKl  with  the  respective  data  types. 

For  public  cloud  storage  users  like  McBride  and  PBS’s 
Engelson,  the  question  seems  to  be,  “What’s  the  fuss?” 

“Talking  about  S3  seems  so  mundane;  it  really  has 
become  something  that  I  don't  worry  about,”  Engelson 
says.  “It’s  really  just  an  extension  of  what  we  do  —  we 
have  to  store  our  data  somewhere,  and  S3  is  our  stan¬ 
dard  for  that.”  • 

Schultz  is  u  longrime  IT  writer  and  editor  in  Chicago.  Vou 
can  reach  her  at  bschultzs824(agmaiI.com. 


Turn  your  mid-range  SAN 

into  a  high-performance  beast 


WHY  PAY  BIG  BUCKS  FOR  A  HIGH-END  SAN? 

XcelaSAN®  will  enable  your  midrange  SAN  to  perform  like  expensive  high-end  storage. 

XcelaSAN  is  a  storage  optimization  appliance  that  enables  easy  and  cost-effective  acceleration  of  application 
data  access  on  Fibre  Channel  SANs,  eliminating  the  need  for  additional  storage  arrays. 

It  increases  lOPS  up  to  30x,  improves  application  response  time  up  to  70%,  features  mirroring  for  high 
availability  and  allows  the  user  to  see  results  immediately,  as  dpposed  to  the  days  or  weeks  required  to  test 
and  deploy  traditional  solutions. 

XcelaSAN  significantly  reduces  costs  by  achieving  greater  storage  system  and  server  utilization.  It  achieves 
significant  application,  database,  SAN  and  server  performance  improvements  without  expensive  upgrades  to 
high-end  systems,  and  reduces  expenses  associated  with  power  and  space. 

Welcome  to  the  Next  Game-Changer. 


Dataram  wants  to  prove  it  to  you.  Give  us  an  opportunity  to  provide  and  install  our  proven  XcelaSAN  solution  at  your  site 
and  we  ll  give  you  a  32GB  Apple  iPad!'  Email  us  at  xcelasanprovesit&dataram.com  or  call  1.800  328.2726.  Option  5. 
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m  Optimizing  datacenters  around  the  world  for  over  43  years. 
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SPOTLIGHT  I  STORAGE 


SPOTLIGHT  I  STORAGE 


whose  physical  properties 
oemory"  of  the  nature  of 
~ow  through  it  and 


XPERTS  AGREE  that  data  preservation  doesn't  happen  by  itself  - 
and  this  wilt  remain  the  case,  even  with  any  future  long-term  non¬ 
volatile,  migrationless  storage  technology. 


Continued  from  pa^  i8 

goal  of  developing  technology  that  could  stofe  data 
for  50  years,  adds  Doug  Balog,  IBM’s  vice  president  of 
storage  platforms.  But  “it’s  not  something  you’ll  be  able 
to  buy  tomorrow,”  he  cautions. 

In  the  meantime,  ‘‘long  term,  nothii^  is  cheaper 
than  storing  things  on  tape,  and  we  continue  to  invest 
in  its  development,”  says  Bruce  Hillsbeig,  head  of  IBM’s 
Research  Storage  Systems  Group  at  Almaden.  Recent 
research  indicates  that  tape  cartridge  capacity  can  be 
increased  by  a  foctor  of  10,  to  35TB,  he  adds. 

Memory  Resistors 

Scientists  at  Hewlett-Packard  are  working  00 
technology  called  a  “memristor  ”  or  metncHy 
resisbH^.  ”We  think  that  memristOT  data  will 
have  a  significantly  kxiger  shelf  life  —  20 
to  30  years  at  least,”  says  Alistair  Veitdi, 
director  of  HFs  Storage  arid  Iiifonnation 
Maiiagemeitt  Hatfonns  Lab.  “The  lab  tests 

we  have  a  couple  of  deca^  of  experience 
that  we  can  say  that  it  is  iDore  durable  than  HP*SAU! 

other  inagtieticcR' critical  media.”  thinks  da 

HP  defines  the  memristor  (discovered 
in  1971)  as  a  fourth  class  of  passive  circuit  _ 


required  software  that  had  become  un¬ 
available.  Storing  the  data  intact  is  called 
“bit  preservation,”  but  retaining  the  ability 
to  do  anything  with  it  is  called  “logical  preservation.” 

“Logical  preservation  is  much  haider  than  bit  pres¬ 
ervation,”  says  Balog.  An  automated  ability  to  translate 
data  to  other  formats  is  a  major  component  of  any 
archiving  system,  but  proprietary  formats  will  defeat 
such  software.  Consequently,  ’’there  is  not  going  to  be 
one  solution,”  Balog  cautions. 

Off-the-shelf  archiving  systems  are  available  to  auto¬ 
mate  part  of  the  preservation  task,  especially  data  migra¬ 
tion  in  response  to  set  policies.  The  National  Film  Board 
of  Canada  uses  a  system  called  Digital  Archive,  from 
Atempo.  In  fact,  says  Dutrisac,  the  board’s 
digitization  program  was  built  around  it. 

“Previously,  we  used  a  lot  of  backup  so¬ 
lutions,”  she  recalls.  “But  we  did  not  have 
a  way  to  catalog  the  files,  put  in  metadata. 
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OF  CONSUMERS  THINK 


BUSINESSES  SHOULD  DO  MORE  TO  ADDRESS 

CLIMATE  change: 

We  think  you  should  get  100%  recognition  when  you  do. 


''“Climate) 
Smart  .y 


SECURITY 


The  tidy  world  of  cryptography 
may  be  upended  by  the  arrival 
of  quantum  computers. 

BYLAMONTWOOD 


N  THE  INDICTMENT  that  led  to  the  expulsion  of 
to  Russian  spies  from  the  U.S.  last  summer,  the 
FBI  said  that  it  had  gained  access  to  their  encrypt¬ 
ed  communications  after  surreptitiously  entering 
one  of  the  qjies’ homes,  where  agents  fcxmd  a  piece 
of  paper  with  a  27-chatactet  password. 

Continued  on  page  34 
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SECURITY 


having  the  computational  resources  of  the  U.S.  gov¬ 
ernment  behind  it.  That's  because  modem  cryptogra¬ 
phy,  vdien  used  correctly,  is  very  strong.  Cracking  an 
encrypted  message  can  take  an  incredibly  long  time. 

■"nie  entire  commercial  world  mns  off  the  assump¬ 
tion  that  encryption  is  rock-solid  and  is  not  break¬ 
able,”  says  Joe  Moorcones,  a  vice  president  at  SafeNet, 
an  information  security  vendor  in  Belcamp,  Md. 

That's  the  case  today.  But  within  the  foreseeable 
future,  cracking  those  same  codes  could  become 
trivial,  thanks  to  quantum  computing. 

Before  learning  about  the  threat  of  quantum 
computing,  it  helps  to  understand  the  current  state  of 
encryption.  There  ate  two  kinds  of  encryption  algo¬ 
rithms  used  in  enterprise-level  communications  secu¬ 
rity:  symmetric  and  asymmetric,  Moorcones  explains. 
Symmetric  algorithms  ate  typically  used  to  seixl  the 
actual  information,  whereas  asymmetric  algorithms 
ate  used  to  send  both  the  information  and  the  keys. 

Symmetric  eixrryption  requires  that  the  sender  and 
receiver  both  use  the  same  algorithm  and  the  same 
encryption  key.  Decryption  is  simply  the  reverse  of  the 
encryption  process  —  hence  the  “symmetric"  label. 

There  are  nrrmerous  symmetric  algorithms,  brrt 
most  enterprises  use  the  Advanced  Errcryption 
Standard  (AESX  published  in  2oot  by  the  National 
Institute  Stanclards  and  Technolo^  after  five  years 
of  testing  It  replaced  the  Data  Encryption  Standard 
(DES),  which  debuted  in  tqyb  and  uses  a  56-lMt  key. 

AES,  which  typically  uses  keys  that  ate  either  128 


The  ENTIRE  COMMERCIAL 
WORLD  runs  off  the 
assumption  that 
ENCRYPTION  IS  ROCK-SOLID 

and  is  not  breakable. 


or  256  bits  lottg,  has  never  been  broken,  while  DES 
can  now  be  broken  in  a  matter  of  hours,  Moorcones 
says.  AES  is  approved  for  sensitive  U.S.  government 
information  that  is  not  classified,  he  adds. 

As  for  classified  information,  the  algorithms  used  to 
protect  it  ate,  rrf  course,  themselves  classified.  “They’re 
rtroreofthesame  —  they  put  in  mote  bells  and  whistles 
to  make  them  harder  to  crack,"  says  IDC  analyst  Charle 
Kolodgy.  And  they  use  muh^  algorithms,  he  says. 

The  genrrine  weakness  of  AES  —  and  any  symmet¬ 
ric  system  —  is  that  the  sender  has  to  get  the  key  to 
the  receiver.  If  that  key  is  intercepted,  transmissions 
become  an  open  book.  That’s  where  asymmetric 
algorithms  come  in. 

Moorcones  explains  that  asymmetric  systems  ate 
also  called  public-key  cryptography  because  they  use 
a  public  key  for  encryption  —  but  they  use  a  differ¬ 
ent,  private  key  for  decryption.  “You  can  post  your 
public  key  in  a  directory  with  your  name  next  to  it, 
and  I  can  use  it  to  encrypt  a  message  to  you,  but  you 
axe  the  only  person  with  your  private  key,  so  you  are 
the  only  person  who  can  decrypt  it." 

The  most  common  asyimnetric  algorithm  is  RSA 
(named  for  inventors  Ron  Rivest,  Adi  Shamir  and  Lei 
Adleman).  It  is  based  on  the  difficulty  of  fiictoring 
large  numbers,  from  which  the  two  keys  ate  derived. 

But  RSA  messages  with  keys  as  long  as  768  bits 
have  been  broken,  says  Paul  Kocher,  head  of  security 
firm  Cryptography  Research  in  San  Francisco.  “I 
would  guess  that  in  five  years,  even  1,024  will  be 
broken,”  he  says. 

Moorcones  adds,  "You  often  see  2,048-bit  RSA 
keys  used  to  protect  2s6-bit  AES  keys.” 

Besides  creating  longer  RSA  keys,  users  are 
also  tumii^  to  elliptic  curve  (EC)  algorithms, 
based  on  the  math  used  to  describe  curves 

size  of  the  key.  EC  can  offer  the  same 
security  with  one-fourth  the  computa¬ 
tional  complexity  of  RSA,  Moonxmes 
says.  However,  EC  encryption  up  to  109 
bits  has  been  broken,  Kocher  notes. 

RSA  remains  popular  with  develop¬ 
ers  because  implementation  requires 
only  multiplication  routines,  leading 

throughput,  Kocher  says.  Also,  all  the 
applicable  patents  have  expired.  For  its 
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For  Healthcare  Providers 

BMk  Performance*  with  NEC.  For  mors  than  two  decades,  NEC  has  designed,  delivered  and 
managed  custom  IT  solutions  for  Mount  Kisco  Medical  Group.  From  real-time  location  services  to 
Unified  Clinical  Communications,  NEC  can  create  powerful  custom  IT  solutions  designed  to  meet  your 
unique  business  challenges.  » 

Rnd  out  more  >  www.necelevateperfbnnance.1 


THE  PROBLEM 

ODAY'S  ENCRYPTION  ALGORITHMS  can  be  broken.  Their  security  derives 
from  the  wikHy  impractical  lengths  of  time  it  can  take  to  do  so. 


SECURITY 


Continucd/romjx^34  think  so.  So  we  need  to  start  figuring  out  what  altema- 

tremendous  progress  in  quantum  computer  tech-  rises  to  deploy,  since  it  takes  many  years  to  change  the 

nology  during  the  last  few  years,"  says  Michele  infrastructure,"  Mosca  says. 

Mosca.  deputy  director  of  the  Institute  for  Quantum  SafeNet's  Mooteones  disagrees.  “DES  lasted  for  30 

Computing  at  the  University  of  Waterloo  in  Ontario.  years,  and  AES  is  good  for  another  20  or  30  years,"  he 

Mosca  notes  that  in  the  past  15  years,  we  have  moved  says.  Increases  in  computing  power  can  be  countered  by 

from  playing  with  quantum  bits  to  building  quantum  changing  keys  more  often  —  with  each  new  message,  if 

logic  gates.  At  that  rate,  he  thinks  it’s  likely  we  will  necessary  —  since  many  enterprises  currently  change 

have  a  quantum  computer  within  20  years.  their  key  only  once  every  90  days,  he  notes.  Every 

“It’s  a  game-changer,”  Mosca  says,  explaining  that  key,  of  course,  requires  a  fresh  cracking  effort,  as  any 

the  change  comes  not  from  improvements  in  the  success  with  one  key  isn’t  applicable  to  the  next, 

computer’s  clock  speed,  but  from  an  astronomical  When  it  comes  to  encryption,  the  rule  of  thumb  is 

reduction  in  the  number  of  steps  needed  to  perform  that  “you  want  your  messages  to  provide  20  years  or 

certain  computations.  mote  of  security,  so  you  want  any  encryption  that  you 

Basically,  Mosca  explains,  a  quantum  computer  use  to  remain  strong  20  years  from  now,”  says  IDC’s 

should  be  able  to  use  the  properties  of  quantum  Kolodgy. 

mechanics  to  probe  for  patterns  within  a  huge  number  For  the  time  being,  “code^weaking  today  is  an 

without  having  to  examine  every  digit  in  that  number.  end-run  game  —  it’s  all  about  snatchhig  the  user’s 

Cracking  both  RSA  and  EC  ciphers  involves  that  very  machine,”  says  Kolodgy.  “These  days,  if  you  pull 

task  —  finding  patterns  in  huge  numbers.  something  out  of  the  air,  you  can’t  decrypt  it.” 

Mosca  explains  that  with  a  conventional  cranputer.  But  the  biggest  challenge  with  encryption  is 

finding  a  pattern  for  an  EC  cipher  with  N  number  of  bits  making  sure  that  it’s  actually  used, 

in  the  key  would  take  a  numl»  of  steps  equal  to  2  raised  “All  business-critical  data  should  be  encrypted 

to  one-half  N.  As  an  examjJe,  for  100  bits  (a  modest  at  test,  especially  credit  card  data,”  says  Richard 

number),  it  would  take  2*°  (1.125  quadrillion)  steps.  Stiennon  at  IT-Harvest,  an  IT  security  research  firm 

With  a  quantum  computer,  it  should  take  a^t  in  Birmingham,  Mich.  “The  Payment  Card  Industry 

SO  steps,  he  says,  which  means  code-breaking  would  Security  Standards  Council  requires  that  merchants 

then  be  no  mote  computationally  demanding  than  encrypt  it  —  or,  better  yet,  not  store  it  at  all.  And 


the  original  encryption  process. 


data-breach  notification  laws  don't  require  you  to 


With  RSA,  determining  the  number  of  steps  disclose  your  lost  data  if  it  was  encrypted.” 


needed  for  a  solution  through  conventional  computa-  And,  of  course,  leaving  your  encryption  keys 

tion  is  more  complicated  than  with  EC  encryption,  lying  around  on  slips  of  paper  can  also  turn  out  to 

but  the  scale  of  t^  reduction  with  quantum  compu-  be  a  bad  idea.  • 

tation  should  be  similar,  Mosca  says.  Wood  is  a  freelance  writer  in  Son  Antonio. 


AMD 

Opteron 


messages,  he  notes. 

The  other  limitation  of  the  system  IsterS^midi  currentlY 
doesn’t  exceed  iOO  kilometeis  (62  miles),  although  the  company 
has  achieved  2S0  kilometers  in  the  lab.  The  theoretical  maximum  is 
4(X)  kilometers.  Ribordy  says.  Going  beyond  that  would  require  the 
development  of  a  quantum  repeater  -  which  would  presumably  use 
the  same  technology  as  a  quantum  computer. 

OKO  security  isn't  cheap:  An  emitter-reteiver  pair  costs  about 
$97,000.  Ribordy  says. 


At  one  end  of  an  optical  fiber,  an  emitter  sends  individual  photons 
to  the  other  end.  Normally,  the  photons  will  arrive  with  the  expected 
values  and  will  be  used  to  generate  a  new  encryption  key. 

But  if  there  is  an  eavesdropper  on  the  line,  the  receiver  will  see  an 
error  rate  in  the  photon  values  and  no  key  will  be  generated.  In  the 
absence  of  that  error  rate,  the  security  of  the  channel  is  assured. 
Ribordy  says. 


THE  OTHER  QUANTUM  TECHNOLOGY 


The  Way  to  Better  Science." 

Cray  builds  computers  that  accelerate  solutions  to  science 
and  engineering's  toughest  challenges.  Since  1 976, 
Cray  systems  have  brought  unparalleled  performance 
and  processing  capability,  enabling  countless  scientific 
breakthroughs.  And  with  solutions  ranging  from  the 
deskside  to  the  datacenter,  Cray  has  the  answer  for  you. 


Security^^ 

T  Maric^r’s  i 

loumal 

Trouble 

Developing  a  Metrics  System 

Quarterly  . 

■iieenvi"-  ■  ■ 

ETRICSCANHAVEavery  reasonable  for  a  one-year  license,  and  it 

Iv  /I  interesting  effect.  You  lets  us  scan  our  entire  address  range.  I'm 

1  ^  /  1  just  have  to  present  them  also  using  Altiris,  which  is  a  Symantec 

1  1  properly.  tool  that  we  use  for  software  distribu- 

^  T  1  spent  the  past  week  tion  and  reporting.  And  finally,  there's 

deciding  which  metrics  1  want  to  collect  Symantec  AntiVirus  Server  for  reporting 

and  present  to  the  QO  on  a  quarterly  on  antivirus  compliance, 

basis,  and  bow  I  will  present  them.  I'm  Initial  results  are  alarming.  Our 

using  Microsoft  ShareFbint  to  collect  my  company  has  about  3,000  workers 

metrics  and  will  export  the  results  to  an  (including  contractois).  You  would  think 

Next,  Altiris  reported  only  800  servers, 
leaving  400  that  we  know  nothing  about. 

And  30  of  those  servers  are  in  our  DMZI 

Besides  reporting  the  ratio  of  managed 
to  unmanaged  devices,  I  will  be  repott¬ 
ing  on  how  many  of  those  devices  are  in 
compliance  with  our  patch  management 
policy.  We  apply  Microsoft  patches  one 
month  after  they  are  released,  giving 

and  applications.  I'll  also  report  on  the 
numter  of  resources  that  are  in  compli¬ 
ance  with  our  antivirus/spyware  policy, 
meaning  they  have  the  most  updated 
software  and  pattern  file. 

Aral  finally.  I'll  report  on  security 
events.  Why?  Because  I  need  to  show 
the  direct  correlation  between  security 
events  and  lack  of  compliatKe  in  order 

Excel  spreadsheet  so  that  I  can  create  that  a  discovery  scan  of  desktops  would 

some  interesting  pivot  taUes  and  charts.  yield  about  3,000  unique  desktop-class 

The  idea  is  that  I  simply  have  to  input  PCs,  with  workers  who  are  not  in  the 

the  data,  and  the  result-  office  o^t  hy  those 

you  have  other  compensating  controls  in 
place,  such  as  IPS  or  other  activity-block- 

ing  presentation  will  be  more  than 

automated.  I  can  even  in-  one  PC.  Our  result: 

corporate  the  Excel  charts  4,200  PCs!  Next,  I  gen- 

into  PowerPoint  so  that  I  crated  a  report  to  see 

only  have  to  open  the  pte-  how  rrrany  of  those  PCs 

sentadon  each  quarter  and  the  data  will  have  the  Akiris  Agent  installed  so  that 

be  updated  automadcally.  And,  if  I  can  we  can  control  the  corrfiguration.  Orrly 

pull  it  off,  I  can  have  some  of  the  metrics  2,400.  This  means  there  are  r,8oo  PCs 

automadcally  populate  rrry  SharePoint  whose  integrity  we  can't  vouch  for.  And 

list.  Gotta  love  automadon!  any  unmanaged  r^^source  represents  risk. 

To  begin  with.  I'm  conducdng  I  did  the  same  for  servers.  I  obtained 

discovery  scans  on  the  endre  enterprise  all  the  IP  address  spaces  for  each  data 

resources  aren't  patched  or  in  compli¬ 
ance  with  antivirus  policy. 

My  plan  is  to  report  to  the  CIO  every 
quarter  on  the  number  of  managed  and 
unmanaged  devices,  and  the  data  related 
to  patches,  antivirus  and  incidents.  This 
will  make  him  aware  of  the  sutus  of  the 

mately  responsible  for  IT)  and  hopefully 
drive  change  in  our  risk  exposure.  Will 

1  be  the  most  popular  guy  in  the  room? 

Probably  not.  Are  these  metrics  relevant? 

to  idendfy  the  total  number  of  devices  center  and  remote  office  and  conducted 

(beginning  with  PCs  and  servers)  con-  discovery  scans  of  all  resources  that 

nected  to  the  network.  I'm  using  Nessus  looked  like  they  were  running  a  server 

to  crmduct  these  scans,  since  it's  a  fairly  operating  system.  The  resiUt:  i,200 

robust  independent  tool.  The  price  is  servers  (mcluding  vrrtual  machines). 

1  need  to  Show  the  direct  correlation  between  security 

W  w  events  and  lack  of  compliance  in  order  to  drive  change. 

38  CO-RUT.AWO.IO  MARCH  21.  201. 

Absolutely.  And  until  we  implement 
network  access  control  to  interrogate 
each  and  every  device  that  is  attached  to 
our  network,  we  will  continue  to  have 

This  ueek'skHiriial  is  writtCTi  byo  real 

^obiious  reasons.  Contort 
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The  Variables  Determine 
The  Value  of  Variable  Cost 


There  are  Other 
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structures 
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A  RECENT  COMPUTERWORLD  ARTICLE  asserted  that  “CFOs  like  the 
pay-as-you-go  economics  of  cloud  computing.”  And  in  uncertain 
economic  times,  many  companies  prefer  a  flexible  cost  structure 
that  lets  IT  rapidly  match  capacity  to  business  needs.  But  financial 
benefits  aren’t  the  only  advantages  of  these  setups. 


Dcnuuid  management.  IT  services  are  never 
free,  even  if  other  departments  aren’t  charged.  Un* 
fortunately,  when  there  is  no  budget  impact,  busi¬ 
ness  units  are  often  casual  about  the  IT  products 
and  services  they  consume.  They  demand  sUtus 
symbols  like  iPads,  monitors  and  the  latest 
smartphones.  They  provide  minimal  justification 
for  requested  IT  applications.  They  fail  to  turn  off 
mailbmes  or  return  laptops  when  pet^le  leave. 

Even  in  companies  without  chargeback  systems, 
equipment  leasing  and  cloud  services  offer  effective 
ways  to  track  usage  of  IT  services.  Most  provid¬ 
ers  offer  detailed  bills  that  track  consumption  by 
product,  service  and  business  urrit.  IT  and  Fmance 
can  collaborate  to  identify  busirress  units  with  high 
consumption  levels.  Most  finance  organizations 
are  happy  to  follow  the  money  in  this  way  atrd 
detrratid  justification  or  reduced  consumption. 

Physical  asset  tracking.  Futed-asset  systems 
account  for  equipmertt  depreciation.  However, 
many  companies  have  a  difficult  time  tracking 
physical  devices.  Desktops  and  laptops  move 
around  in  order  to  support  staffing  changes 
and  (»ganizational  realignment.  Server  centers 
regulady  reconfigure  equipment  to  accommodate 
workload  changes.  Processors,  memory  and  other 
components  are  often  altered  to  extend  a  system’s 
useful  life,  repair  faulty  equipment  or  increase 
user  productivity.  It’s  a  ni^ttttare!  Worse,  disap¬ 
pearing  computer  equipment  itKteases  the  poten¬ 
tial  for  data  breaches. 

Leases  offer  a  compelling  rationale  for  demand¬ 
ing  that  business  units  track  equipment.  Equip¬ 
ment  must  be  returned  at  the  end  of  the  lease;  it 


must  be  tracked  accurately  or  the  comparry  will  be 
charged  for  lost  items.  (Even  if  lost  equipment  is 
not  charged  to  the  offending  business  unit,  IT  has 
a  strong  argument  for  the  CFO  for  budget  relief.) 

TediMitigv  refresh.  ’The  point-of-sale  eeprip- 
ment  in  one  Fortune  500  company  was  so  old 
that  IT  had  to  scavetge  parts  from  used  POS 
statiotts  that  were  faeirtg  decommissioned  by  other 
companies  (often  searching  eBay  to  find  the  right 
models).  IT  then  invested  significant  time  and 
resources  to  repair  broken  POS  terertinak.  Since 
IT  labor  was  not  charged  to  store  operations  but 
depreciation  for  new  POS  devices  would  be,  store 
cqietations  had  little  incentive  to  replace  the  old 
equipment.  Eventually,  the  CIO  convinced  the 
CFO  to  lease  IT  equipment,  eliminating  the  temp¬ 
tation  to  operate  expensive  and  obsolete  devices. 

Some  organizations  believe  that  fully  depred¬ 
ated  equipment  is  free  in  a  way.  ’They’re  reluctant 
to  replace  it  even  when  its  maintenance  costs  are 
enormous  and  its  dated  capabilities  hamper  pro¬ 
ductivity.  In  contrast,  leasing  comparties  upgrade 
ecpiipment  at  predetermined  irrtervals,  conve¬ 
niently  elitrunating  out-of-date  equipment  atrd 
battles  over  budgeting  for  technology  refreshes. 

Besides  financial  flexibility,  variable  cost 
mechanisms  provide  IT  with  an  effective  vehicle 
for  tracking  resource  consumption.  These  mecha¬ 
nisms  also  provide  many  of  the  controk  and 
deckion-making  benefits  of  chargeback  without 
its  significant  investment  or  overhead.  Finally,  IT 
can  deflect  complaints,  attributing  the  imposed 
controk  to  the  feasing/cloud  comparry.  ’This  tirtre, 
someone  eke  gets  to  be  the  bad  guy.  ♦ 
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The  percentage  of  Americans  age  55  or  older  who  are 
in  the  labor  force  has  been  on  the  rise  since  1993  and 
in  2010  exceeded  the  percentage  recorded  in  1975. 

for  older  workers  who  haven't  reached  retirement  age. 

the  higher  rate  of 
labor  participation 
Labor  participation  attributed  to 

rate  of  workers 

Year  S5  and  older  an  increase  the  num- 

ber  of  women  in  the 
the 

percentages  of  both 


workforce  who  are  65 
or  older  has  grown. 
Education  level  has 
a  strong  correlation 
with  a  higher  labor- 


What  aocoMtstarOiidHMfl^  Companies  tend  to  hite  younger 
to  get  a  return  on  investment.  A  younger  person  might  be  able  to 
contribute  for  10  to  15  years,  be  part  of  succession  planning  and  add 
bench  strength.  Nonetheless,  companies  today  are  recognizing  that 
if  they  can  get  five  to  10  years  of  good  performance,  then  the  invest¬ 
ment  is  good.  This  is  different  thinking  than  15  or  more  years  ago. 

ment.  But  they  accept  the  reality  that  people  today  move  on  more 
puickly  than  they  did  in  the  past,  especially  the  younger  generation. 

Among  employers,  there's  a  new  emphasis  on  developing  better 
retention  vehicles  and  a  cultufe  that  offers  work/life  balance  and  a 
more  purposeful  life  through  things  like  giving  back,  pur-suing-greer 
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ATTENTION... 
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Let  us  help  you  put 
together  a  cost-effective 
program  that  wiH  make  this 
time-consuming  task  a  little  easier! 

Place  your 
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TRUE  TALES  OF  IT  LIFE  AS  TOLD  TO  SHARKY 


IT,  the  Business  and 
The  Clash  of  Cultures 


While  business 
^nuisneed 
IT  mote  than 
ever,  the  levels 
of  mutual  bust 
remain  low 
andfnistration 
remains  high. 
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You  can  contact  him  at 
infoQpaulglen.com. 


After  more  than  lO  years  of  focusing  on  the  organizational, 

structural  and  managerial  issues  inside  technical  groups.  I’ve  start¬ 
ed  shifting  my  attention  to  the  boundaries  of  our  groups,  to  the  re¬ 
lationship  between  IT  and  the  rest  of  the  business. 


And  after  months  of  research  and  talks  with  IT 
leaders,  what  has  surprised  me  most  is  how  little 
progress  we  seem  to  be  making  in  improving  our 
external  relationships.  While  business  groups 
need  IT  more  than  ever,  the  levels  of  mutual  trust 
remain  low  and  frustration  remains  high. 

I  think  there  are  some  important  thin^  we 
need  to  recognize  to  make  more  progress. 

There  is  no  such  thing  as  ‘*tbe  business-lT 
relationship.'’  We’ve  developed  shorthand  phrases 
for  discussing  our  relationships  with  the  various 
consume  of  technolc^  we  serve.  Because  our 
users  are  so  diverse,  we’ve  needed  a  way  to  con- 
ceptualize  us  and  them  in  a  simple  way.  But  this 
is  a  dysfunctional  oversimplification.  There  is  no 
one  who  self-ktentifies  as  “the  business.” 

There  are  a  variety  of  functional  groups  within 
our  organizations  that  use  our  products  and 
services,  but  they  are  quite  di^rent  from  one 
another.  Finance  groups  are  not  like  sales  groups. 
Logistics  groups  are  not  like  marketing.  Manu&c- 
turing  is  nothing  like  human  resources.  Our  rela- 
tionships  with  all  need  to  be  tended  differently. 


dural.  The  methods  we  have  been  using  to  try  to 
work  more  effectively  with  our  consumers  all  have 
one  thing  in  common:  They  focus  on  everything 
other  than  the  relationship  itself.  Think  about  it. 
IT  governance  and  portfolio  management  focus 


Prefect  managemem  focuses  on  tasks. 

These  are  all  important,  but  they  minimize  the 
human  part  of  the  equation.  The  biggest  chaL 


lenges  are  cultural,  not  procedural  or  teebnkaJ. 
Tlie  groups  we  serve  have  diffmnt  subcultures 
foom  ours,  and  the  clash  of  these  cultures  leads  to 
miscommunication  and  an  inability  to  understand 


tkmal  unit  is  complicated  by  their  response  to 
technology,  and  not  just  to  us.  Business  relation- 
ships  are  about  more  than  the  sum  of  the  activities 
and  services  exchanged  between  individuals  and 
groups.  There  are  feelings  involved.  And  the  feel¬ 
ings  that  IT  consumers  have  about  us  are  not  just 
about  us.  It’s  difficult  for  them  to  separate  their 
feelings  about  technology  from  those  about  the 
people  who  select,  build  and  support  it  for  them. 

I’m  sure  we’ve  all  seen  cases  in  which  users  resist 
a  new  technology.  This  is  usuallyattributed  to  fear 
exchange,  but  this  is  just  an  oversimplific^ion  and 
is  dismissive  their  a>ncems.  They  often  resist  new 
techndogy  because  it  violates  some  aspect  of  their 
deeply  held  beliefs  about  how  the  wotkl  does  or 
shoidd  work.  It  conflicts  with  their  priorities  or  their 
assumptions  about  their  role  in  the  organization. 

These  are  culture  conflicts  a  different  sort, 
but  culture  conflicts  nonetheless.  Rare  are  the  IT 


with  the  technology  itself  rather  than  with  those 
of  us  deemed  responsible  for  bringii^  it  to  them. 

If  we  are  going  to  progress  in  the  hard  work  of 
building  and  maintaining  cross^unctional  rela¬ 
tionships,  we  need  to  start  thinking  more  about 
our  own  culture  and  those  our  users.  Now  that 
IT  is  ubiquitous,  we  must  acknowledge  the  human 
challenges  that  delivering  technology  brings.  ♦ 
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